Merge branch 'bug19769_19025_029'

This commit is contained in:
Nick Mathewson
2017-01-18 09:02:48 -05:00
7 changed files with 42 additions and 62 deletions
+4
View File
@@ -0,0 +1,4 @@
o Major bugfixes (DNS):
- Fix a bug that prevented exit nodes from caching DNS records for more
than 60 seconds.
Fixes bug 19025; bugfix on 0.2.4.7-alpha.
+7
View File
@@ -0,0 +1,7 @@
o Major features (security):
- Change the algorithm used to decide DNS TTLs on client and server side,
to better resist DNS-based correlation attacks like the DefecTor attack
of Greschbach, Pulls, Roberts, Winter, and Feamster). Now
relays only return one of two possible DNS TTL values, and clients
are willing to believe DNS TTL values up to 3 hours long.
Closes ticket 19769.